Security Engineer with strong experience across pentesting, infrastructure security, and DevSecOps, on real-world production systems. Breaks applications and infrastructure to uncover critical weaknesses, and builds security controls to prevent them — offensive testing plus defensive engineering for practical, end-to-end improvements.
I’m a Security Engineer with strong experience across pentesting, infrastructure security, and DevSecOps, working on real-world production systems at Hashira Works (Hyderabad, India) — including Garden Finance and related environments.
I’m skilled at breaking applications and infrastructure to uncover critical weaknesses, and at building effective security controls to prevent them. I combine offensive testing with defensive engineering so findings turn into practical, end-to-end security improvements — not one-off reports.
That shows up as hands-on VAPT, attack-surface work, Zero Trust and edge controls, container and CI/CD security, and detection pipelines backed by Wazuh, Suricata, and Falco — with clear write-ups and measurable follow-through.
MCP server enabling AI agents to run structured bug-bounty-style workflows; modular TypeScript MCP + Python agents for recon, scanning, exploitation, and reporting; session-based workflows and centralized findings storage; integrates with Claude, GPT, and similar agents for adaptive security testing.
Centralized XDR/SIEM on Wazuh with host, container, and network telemetry; custom detection rules for suspicious activity, brute force, and anomalous behavior; log ingestion, alerting, and correlation tuned for visibility and lower noise; continuous monitoring across systems.
Webhook-driven automation enforcing secure repo workflows on creation: protected branches, PR requirements, merge restrictions, and RBAC-style approvals; event logging for audit visibility; standardized policies across repositories at scale.
DNS reconnaissance and analysis for assessments: multi-record resolution, SPF / DKIM / DMARC checks, structured exports (JSON, CSV, XLSX), and optional views to speed up analysis during recon workflows.
shadow-dnspy on GitHub ↗
Notes on detection engineering, offensive methodology, tooling, and shipping security that sticks — longer reads live off-site; add your RSS or platform when ready.
I’m always interested in new opportunities and collaborations. Whether you need application security and VAPT, penetration testing with remediation support, DevSecOps and pipeline-integrated testing, or detection and compliance depth on top of that, feel free to reach out.